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Amendments to the Claims: 

This listing of the claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

1 . (currently amended) A method for securing ownership for a two-part device 
w i th a phys i cal unit and a virtua l unit , wherein ownership of the two-part device is 
efficiently initiated, maintained, and transferred, comprising the steps of: 

initiating new registration ownership rights of a physical unit and a virtual unit of 
the two-part device , by a user, with an activation signal from the physical unit to the 
virtual unit to activate an ownership procedure and configuring registration to allow the 
physical unit and virtual unit to be operable at different locations : and 

utilizing a double safety mechanism to activate ownership services via the virtual 
unit for the physical unit. 

2. (original) The method of claim 1 wherein the virtual unit is a virtual device 
hosting entity that is one of: an Internet Data Center, an e-Services Host, a Control 
Console, and a Secure Data Storage Unit. 

3. (original) The method of claim 2 wherein the Control Console is a web 
browser. 

4. (original) The method of claim 2 wherein the Secure Data Storage Unit is a 
memory controllable by the user. 

5. (original) The method of claim 2 wherein the Secure Data Storage Unit is a 
physical device under control of the user. 

6. (original) The method of claim 2 wherein the Secure Data Storage Unit is a 
virtual device under control of the user. 
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7. (original) The method of claim 1 wherein the double safety mechanism 
includes the steps of: 

upon the virtual unit upon being activated, generating a first Knowledge Element 
and a first Proof of Knowledge Check Element; 

storing the first Knowledge Element in a Secure Storage Unit and sending the 
Proof of Knowledge Check Element to the virtual unit; 

upon the virtual unit receiving the Proof of Knowledge Check Element, storing, by 
the virtual unit the first Proof of Knowledge Check Element in an Ownership Proof of 
Knowledge Check Store and generating, by the virtual unit, a second Knowledge 
Element and a second Proof of Knowledge Check Element; 

storing, by the virtual unit, the second Knowledge Element in an Ownership 
Knowledge Element Storage Unit; sending, by the virtual unit, the second Proof of 
Knowledge Check Element to the physical unit; and 

storing the second Proof of Knowledge Check Element in a second Proof of 
Knowledge Check Store unit. 

8. (original) The method of claim 7 wherein generating the first Knowledge 
Element and the first Proof of Knowledge Check Element is accomplished by the 
physical unit. 

9. (original) The method of claim 7 wherein generating the first Knowledge 
Element and the first Proof of Knowledge Check Element is accomplished by a Control 
Console coupled to the virtual unit, the physical unit and to a Secure Data Storage Unit. 

10. (original) The method of claim 7 wherein storing the second Proof of 
Knowledge Check Element in a second Proof of Knowledge Check Store unit is 
accomplished by the physical unit by storing in a memory of the physical unit. 

1 1 . (original) The method of claim 7 wherein storing the second Proof of 
Knowledge Check Element in a second Proof of Knowledge Check Store unit is 
accomplished by a Control Console by storing in a Secure Data Storage unit. 
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12. (original) The method of claim 1 wherein initiating, by a user, an activation 
signal from the physical unit to the virtual unit to activate an ownership procedure 
includes utilizing an Internet address recorded in the physical unit to send the activation 
signal. 

13. (original) The method of claim 1 wherein initiating, by a user, an activation 
signal from the physical unit to the virtual unit to activate an ownership procedure 
includes utilizing a uniform resource identifier recorded in the physical unit to send the 
activation signal to the virtual unit. 

14. (currently amended) A method for taking ownership of a part-physical, part- 
virtual device, comprising the steps of: 

initiating new registration ownership rights of a physical unit and a virtual unit of 
the part-physical, part-virtual device; 

communicating, by a the physical unit of the device, by sending an activation 
signal to a the virtual unit of the device; and 

registering ownership of the device using a double knowledge check-proof of 
knowledge check mechanism ; and 

configuring the registration to allow the part-physical and part-virtual devices to 
be operable at different locations . 

15. (original) The method of claim 14 wherein the virtual unit is a virtual device 
hosting entity that is one of: an Internet Data Center, an e-Services Host, a Control 
Console, and a Secure Data Storage Unit. 

16. (original) The method of claim 15 wherein the Control Console is a web 
browser. 

17. (original) The method of claim 15 wherein the Secure Data Storage Unit is a 
memory controllable by the user. 
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18. (original) The method of claim 15 wherein the Secure Data Storage Unit is a 
physical device under control of the user. 

19. (original) The method of claim 15 wherein the Secure Data Storage Unit is a 
virtual device under control of the user. 

20. (currently amended) The method of daim 14 wherein the double knowledge 
check-proof of knowledge check mechanism includes the steps of: 

upon the virtual unit upon being activated, generating a first Knowledge Element 
and a first Proof of Knowledge Check Element; 

storing the first Knowledge Element in a Secure Storage Unit and sending the 
Proof of Knowledge Check Element to the virtual unit; 

upon the virtual unit receiving the Proof of Knowledge Check Element, storing, by 
the virtual unit the first Proof of Knowledge Check Element in an Ownership Proof of 
Knowledge Check Store and generating, by the virtual unit, a second Knowledge 
Element and a second Proof of Knowledge Check Element; 

storing, by the virtual unit, the second Knowledge Element in an Ownership 
Knowledge Element Storage Unit; 

sending, by the virtual unit, the second Proof of Knowledge Check Element to the 
physical unit; and 

storing the second Proof of Knowledge Check Element in a second Proof of 
Knowledge Check Store unit. 

21. (original) The method of claim 20 wherein generating the first Knowledge 
Element and the first Proof of Knowledge Check Element is accomplished by the 
physical unit. 

22. (original) The method of claim 20 wherein generating the first Knowledge 
Element and the first Proof of Knowledge Check Element is accomplished by a Control 
Console coupled to the virtual unit, the physical unit and to a Secure Data Storage Unit 
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23. (original) The method of claim 20 wherein storing the second Proof of 
Knowledge Check Element in a second Proof of Knowledge Check Store unit is 
accomplished by the physical unit by storing in a memory of the physical unit. 

24. (original) The method of claim 20 wherein storing the second Proof of 
Knowledge Check Element in a second Proof of Knowledge Check Store unit is 
accomplished by a Control Console by storing in a Secure Data Storage unit. 

25. (original) The method of claim 14 wherein activating, by a user, an ownership 
trigger of a physical unit of the device includes using an Internet address recorded in the 
physical unit to send the activation signal. 

26. (original) The method of claim 14 wherein activating, by a user, an ownership 
trigger of a physical unit of the device includes utilizing a uniform resource identifier 
recorded in the physical unit to send the activation signal to the virtual unit. 

27. (currently amended) A two-part device with a physical unit and a virtual unit, 
wherein ownership of the two-part device is efficiently initiated, maintained, and 
transferred, comprising: 

a physical unit, having an ownership activation trigger for initiating, by a user, an 
activation signal from the physical unit to the virtual unit to activate an ownership 
procedure that creates an electronic association before a user takes possession ; and 

the virtual unit, which communicates with the physical unit upon activation; 

wherein the physical unit and the virtual unit employ a double safety mechanism 
to register ownership services and wherein ownership registration allows the physical 
unit and the virtual unit to be operable at different locations . 

28. (original) The device of claim 27 wherein the virtual unit is a virtual device 
hosting entity that is one of: an Internet Data Center, an e-Services Host, a Control 
Console, and a Secure Data Storage Unit. 
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29. (original) The device of claim 28 wherein the Control Console is a web 
browser. 

30. (original) The device of claim 28 wherein the Secure Data Storage Unit is a 
memory controllable by the user. 

31 . (original) The device of claim 28 wherein the Secure Data Storage Unit is a 
physical device under control of the user. 

32. (original) The device of claim 28 wherein the Secure Data Storage Unit is a 
virtual device under control of the user. 

33. (original) The device of claim 27 wherein the virtual unit is activated and in 
the double safety mechanism, a first processor in the physical unit generates a first 
Knowledge Element and a first Proof of Knowledge Check Element, stores the first 
Knowledge Element in a Secure Storage Unit and sends the Proof of Knowledge Check 
Element to the virtual unit, which authenticates and stores the Proof of Knowledge 
Check Element in an Ownership Proof of Knowledge Check Store and a second 
processor in the virtual unit generates a second Knowledge Element and a second 
Proof of Knowledge Check Element, wherein the second Proof of Knowledge Check 
Element is stored in an Ownership Knowledge Element Storage Unit; and the virtual unit 
sends the second Proof of Knowledge Check Element to the physical unit, which 
authenticates and stores the second Proof of Knowledge Check Element in a second 
Proof of Knowledge Check Store unit. 

34. (original) The device of claim 33 wherein the physical unit generates the first 
Knowledge Element and the first Proof of Knowledge Check Element. 

35. (original) The device of claim 33 further including a Control Console coupled 
to the virtual unit, the physical unit and to the Secure Data Storage Unit, wherein the 
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Control Console generates the first Knowledge Element and the first Proof of 
Knowledge Check Element. 

36. (original) The device of claim 33 wherein the physical unit stores the second 
Proof of Knowledge Check Element in the second Proof of Knowledge Check Store unit 
that is a memory of the physical unit. 

36. (original) The device of claim 33 further including a Control Console coupled 
to the virtual unit, the physical unit and to a Secure Data Storage Unit, wherein the 
Control Console stores the second Proof of Knowledge Check Element in the 
Ownership Knowledge Element Storage Unit. 

37. (original) The device of claim 27 wherein the ownership activation trigger 
utilizes an Internet address recorded in the physical unit to send the activation signal. 

38. (original) The device of claim 27 wherein the ownership activation trigger 
utilizes a uniform resource identifier recorded in the physical unit to send the activation 
signal to the virtual unit 

39. (currently amended) A system for taking ownership of a part-physical, part- 
virtual device, comprising: 

an activation trigger, located on a physical unit of the device, for initiating an 
activation signal and new registration ownership rights of the physical unit of and the 
virtual unit of the part-phvsicaL part-virtual device ; and 

the physical unit of the system, coupled to the activation trigger, for sending the 
activation signal to a virtual unit of the system; and 

the virtual unit of the system, arranged to communicate with the physical unit of 
the system, for registering ownership of the device using a double knowledge check- 
proof of knowledge check mechanism and for configuring registration to allow the part- 
physical and part-virtual devices to be operable at different locations . 
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40. (original) The system of claim 39 wherein the virtual unit is a virtual device 
hosting entity that is one of: an Internet Data Center, an e-Services Host, a Control 
Console, and a Secure Data Storage Unit. 

41 . (original) The system of claim 40 wherein the Control Console is a web 
browser 

42. (original) The system of claim 40 wherein the Secure Data Storage Unit is a 
memory controllable by the user. 

43. (original) The system of claim 40 wherein the Secure Data Storage Unit is a 
physical device under control of the user. 

44. (original) The system of claim 40 wherein the Secure Data Storage Unit is a 
virtual device under control of the user. 

45. (original) The system of claim 39 wherein the double knowledge check-proof 
of knowledge check mechanism is a mechanism wherein the virtual unit validates the 
identity of the physical unit using a proof of knowledge check that corresponds to a 
knowledge element of the physical unit and the physical unit validates the identity of the 
virtual unit using a proof of knowledge check that corresponds to a knowledge element 
of the virtual unit. 

46. (original) The system of claim 39 wherein ownership is registered when the 
physical unit communicates with the virtual unit via an Internet address associated with 
the virtual unit. 

47. (original) The system of claim 46 wherein the virtual unit includes a first 
storage location for an Ownership Knowledge Element Store, coupled to store a 
knowledge element for the virtual unit, a second storage location for an Ownership 
Proof of Knowledge Check Store, coupled to receive an Ownership Proof of Knowledge 
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Check from the physical unit, and an Ownership State Machine, coupled to the 
Ownership Knowledge Element Store and the Ownership Proof of Knowledge Check 
Store, for beginning in a Not Yet Activated state, transitioning to an Activated state upon 
successful completion of the double knowledge check-proof of knowledge check 
mechanism, and transitioning to an Owned state when ownership has been established. 

48. (original) The system of claim 47 further including a console, coupled to the 
virtual unit via a network connection and to a Secure Storage Unit, for maintaining a 
Knowledge Element Store and a Proof of Knowledge Check Store in the Secure 
Storage Unit and, upon user selection, for generating a first Knowledge Element and a 
corresponding first Proof of Knowledge Check for the part-physical, part-virtual device, 
storing the first Knowledge Element in the Secure Storage Unit and sending the first 
Proof of Knowledge Check to the virtual unit. 

49. (original) The system of claim 48 wherein the virtual unit, upon receiving the 
first Proof of Knowledge Check, stores the first Proof of Knowledge Check in the 
Ownership Proof of Knowledge Check Store and generates a second Knowledge 
Element and a corresponding second Proof of Knowledge Check, stores the second 
Knowledge Element in the Ownership Knowledge Element Store and sends the 
corresponding second Proof of Knowledge Check to the console, which stores the 
corresponding second Proof of Knowledge Check in the Secure Storage, whereupon 
the virtual unit advances the Ownership State Machine to an Owned state. 

50. (original) The system of claim 49 wherein the Owned state allows a full range 
of predetermined owner services to be accessed using the double knowledge check- 
proof of knowledge check mechanism. 

51 . (original) The system of claim 50 wherein the Owned state allows a full range 
of predetermined owner services to be transferred using the double knowledge check- 
proof of knowledge check mechanism. 
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